Questions tagged [cisco]

The major provider of networking equipment. This is a generic tag to be used when no more specific tags are available. See the list of tags in Help Center Tag page.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

noob learning cisco

I'm trying to teach myself how to use cisco devices. i was given an router, switch and firewall. so far i been able to set up vlan and have intra vlan routing working. My issue is having the switch ...
4 votes
3 answers
4k views

MTR packet Loss at intermediate hop

We are currently having issues with our WebService being intermittently inaccessible to clients. During diagnosis with the NOC and with some internal testing we believe we have a router dropping ...
0 votes
1 answer
389 views

Site-to-site IPsec and rerouting to another IPsec tunnel

We have three different geo sites (SITE1, SITE2 and SITE3) and each site has PFSense firewall installed. Sites have been connected together with IPSec tunnels. Also Site2 is connected to customer ...
1 vote
2 answers
157 views

What Does Exactly Happen When A Switch Is Connected To A Portfast Port?

I am trying to get a thorough understanding of what does happen when a switch is connected to a portfast port on another switch that is part of a stable STP network in case of: 1- the port has no ...
0 votes
0 answers
10 views

Netconf filter to get the access vlan of each switchport interface [closed]

Wondering if anyone has any filters i can use to get the access vlan associated with all the switchport interfaces on a switch. I am using python's ncclient to connect to the device.
0 votes
0 answers
13 views

Cisco switch how to pass password via SSH cli [closed]

I created a new user to login via RSA Key, and this works. But I'm going to find a way to somehow be able to pass the enable command's password in one command. Suppose I want to save the output of ...
5 votes
4 answers
41k views

Cisco Router Telnet Connection Refused

I have a cisco 1941 router just configured but no matter how I go about configuring the telnet, it seems not to work. It has interfaces already set up and systems can browse through it in the office....
0 votes
1 answer
46 views

Build custom image for CISCO devices

Do CISCO devices support custom image building or deploying custom plugins? OpenWrt has such feature.
0 votes
1 answer
89 views

Looking for sanitized Cisco IOS XR configurations

I'm looking for someone who can answer with a sanitized Cisco IOS XR text configurations. These configurations will be used to test ciscoconfparse config parsing, specifically to start working on ...
2 votes
1 answer
7k views

IPSec IKEv2 connection failure due to RSA authentication issue

I'm trying to get an IPSec/IKEv2 setup working, which was implement following this I don't understand why, but when a client connects (StrongSwan on Android here), the session is closed because the ...
0 votes
1 answer
307 views

Cisco Nexus vPC Portchannel issues

I'm currently facing a network issue between Cisco Nexus 93108 (9.3.11) on an LACP port-channel configuration. The replica below help us to reproduce the issue we had (using 4x Nexus 9000v qcow2 image ...
0 votes
0 answers
46 views

Cisco: 9606R Switch Firmware update

I have updated my other Cisco 9300 switches, but am a bit confused on how to even select the right firmware for my Cisco 9606R Core. If I run sh ver it displays the following: Cisco IOS XE Software, ...
1 vote
1 answer
37 views

The TTL and packet drop [duplicate]

I would just like to verify one thing. When a router receives a packet with a TTL of 1, the router can still process and accept it if its destined for itself, correct? Because for example, eBGP ...
0 votes
1 answer
60 views

How to configure IDr on Cisco ASA for AWS IPsec tunnels

I am currently facing an issue while attempting to establish IPsec tunnels between AWS and a Cisco ASA firewall. The AWS tunnel logs indicate that the Identity Resolution checks are failing, ...
0 votes
1 answer
653 views

Duplicated Vlan ID

I have one flat network with our data center and it is causing as a lot of issues, so i had to design a new network to separate the buildings from the data center, when I designed the new network i ...
3 votes
2 answers
385 views

Looking for a sanitized Cisco NXOS configuration

This may sound a bit unusual, but I'm looking for someone who can answer with a sanitized NXOS configuration with the following features used: vPC FEX EIGRP, OSPF or ISIS (IPv4) HSRP or VRRP This ...
4 votes
3 answers
5k views

Python Script to change ip-helper IP on Cisco devices? [closed]

New to stack exchange and Python. Hopefully this is allowed to be asked. I am taking a class on Python and finally starting to dip my toe into the water. I have a ton to learn but I already have a ...
0 votes
2 answers
50 views

Setting FortiGate HA Firewall

I need some advice and guidance regarding setting up the FortiGate HA, My question is focused on WAN side of configuration (not A WAN expert), below are highlight environment 2 ISP WAN-A / WAN-B ...
0 votes
1 answer
123 views

How To get active vpn(site tot site) count from cisco FTD using ansible

I have been trying to get active VPN count from FTD firewalls using ansible, I tried the same on ASA and it have been running successfully. But when comes to FTD ansible, As it uses httpapi instead of ...
0 votes
2 answers
39 views

Interface is down/down but internet works

I am managing a network at my company. A patch panel provides connections to the switch, which is connected to the router. One of the connections on the switch does not display a blinking green light. ...
3 votes
3 answers
424 views

Switchport fail (edited)

I hope can someone help me with my problem on my Cisco 2960 switch. My question is this: when I configure the Gig0/1 port on my client 2960 switch as trunk, and connect it to my server 3560 switch ...
2 votes
1 answer
366 views

How can I configure a Cisco router 4300 to allow internal server ip:80 to be accessed on public ip:4500

I have an internal web server on port 80. I need help commands maybe to configure port forwarding to access the server on my private network from a public IP Current running config interface ...
0 votes
1 answer
716 views

Cisco NAT - Overload PAT and Static nat from one inside to two outside interfaces

i have following setup Cisco ISR4k Router with one inside LAN interface and two outside Interfaces. ---- WAN1 (NAT outside) LAN (NAT inside) -- ISR4k | ...
2 votes
2 answers
293 views

Static NAT and PAT

I have two private IP addresses, want to make them NAT to 203.0.113.0/2 public IP address. WAY 1 : Static NAT (2 ip addresses NATted to one by manually) WAY 2 : PAT (Router gives port number ...
0 votes
1 answer
28 views

Disable the --more-- prompt in Cisco CLI

show startup-config: ! line con 0 login local length 0 line vty 0 exec-timeout 0 0 login local length 0 line vty 1 4 login local length 0 line vty 5 15 login local length 0 ! However I still get ...
0 votes
2 answers
580 views

Cisco router on a stick with public ip wan (ISP)gateway

I am trying to create a router on a stick with an outside facing sub-interface with a public IP from an ISP. I have tried to configure NAT and routing but I just cant get to ping the internet. I'm ...
0 votes
1 answer
4k views

Destination NAT on Cisco ISR

I know how to perform regular overload PAT in my lab running sh ver Cisco IOS XE Software, Version 16.03.09 Cisco IOS Software [Denali], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.3.9, ...
0 votes
2 answers
58 views

How to apply a Route-Map to a NAT connection

I am following a tutorial about route-maps on youtube. https://www.youtube.com/watch?v=2YlsXcT1Pjw There is this topology. The default route on R1 points to 10.10.10.2 In the video he just shows how ...
0 votes
1 answer
46 views

Configuring multiple public IPs in Cisco 881 to forward private IPs with tags while bandwidth balancing [closed]

The ISP is sending four tagged public IPs (VLAN 30) through one WAN cable. Currently, this cable is connected to a switch that recognizes the tag and distributes it appropriately. Naturally, a router ...
-1 votes
1 answer
36 views

Cisco VLAN Taking up Entire Subnet

I have a default vlan 1 that has an IP configuration of 10.20.11.0 with a subnet mask of 255.255.255.0. I have an AP 10.20.11.55 that I want to place on its own VLAN because I intend to make this AP ...
0 votes
1 answer
103 views

DMZ cannot send traffic to INSIDE (Cisco ASA 5505)

Have a nice day, everyone. I have a question while working with Cisco ASA 5505 firewall. I want to create a interface/VLAN for DMZ. To do this: int vlan 3 no forward interface vlan 1 nameif dmz ...
9 votes
4 answers
26k views

Access-Lists and VLAN and understanding traffic flow

I have a question that I am having a very hard time wrapping my mind around, and I think you might be able to square me away. When applying an access list to a VLAN interface (VLAN 32) in a L3 switch,...
4 votes
1 answer
3k views

VRF Leak global default route with a single router

I am fairly inexperienced with VRF, and I'm struggling to leak a default route from the global table, into the VRF. I've come across various solutions, but none seem to properly fit my requirements, ...
0 votes
1 answer
50 views

Recover Aironet AP-ESC doesn’t seem to break c2602 boot sequence

I am trying to reuse an old Cisco Aironet c2602 Autonomous AP; I need to reset the password. CCO instructions say that I need to hit ESC repeatedly while I am on the console during the AP boot ...
0 votes
1 answer
40 views

How do i add a gateway for a L2TP Tunnel?

Maybe the question title is kind of odd but i dont know how to describe my problem. I have this setup. [Client1]=eth1= --> =fa1/0=[ R1 ]=fa0/0= -- |...
1 vote
1 answer
303 views

Cisco 3560G not passing IPv6 RA when VLAN without IPv6 address

Problem: When having VLAN without IPv6 address on L3 enabled switch, no RA is passed through VLAN unless there is IPv6 address assigned to the VLAN. Static assigments however are reachable fine. ...
0 votes
2 answers
174 views

Cisco 9200L has empty config after IOS update

I have uploaded the newest recommended image on a C9200L switch, and its running the new version now. But the config is empty. Do i need to copy the old config again or how do i recover the old config ...
0 votes
1 answer
1k views

Login local , login synchronous

I dont understand what those two comands mean when im enabling ssh on Vty-line. Can someone please explaim me please whatthose comand do and why i need to use them?
0 votes
1 answer
470 views

Ping to default gateway failing

I am trying to ping to a default gateway which i have configured as 171.2.0.1 but somehow the ping is failing . I am new to network domain so i have less idea about it . Any help is appreciated .This ...
0 votes
1 answer
71 views

Cisco IOS Privilege Escalation Vulnerability Workaround

For this Cisco vulnerability that they have discovered it states that If the ip http server command is present and the configuration also contains ip http active-session-modules none, the ...
0 votes
0 answers
27 views

Cisco switch ios update without change license

I need the following ios switches to be updated to the latest "license-free" version to fix vulnerabilities: C3560CX-12pd-S C3650-48PS-E C3850-12S-E C3850-24T-E C3850-12S I didn't find any ...
1 vote
1 answer
99 views

Cisco ports shutting down temporally due to arp-inspection

We have a couple of Cisco 9300 switches. We had the switch configured using STIGS. A couple users have complained that their Avaya phones restarted. I started running the show logs and noticed the ...
0 votes
0 answers
96 views

Cisco nexus 9336-FX2 ETHPORT-5-IF_DOWN_LINK_FAILURE

I am seeing following error on 100G interface. (SFP bought from fs.com) nxos version 9.3.10 2023 Oct 11 00:41:12 spine-1 %ETHPORT-5-IF_DOWN_LINK_FAILURE: Interface Ethernet1/4 is down (Link failure) ...
-1 votes
1 answer
193 views

In gnss3, why can't I ping my cisco router from my VM?

I have the following network, I have never configured a Cisco router before so I'm having a little trouble. In router R1 I used the following commands to assign an ip to the router: configure terminal ...
0 votes
1 answer
88 views

Cisco triangle network with static routing not working

I have this network when the network tries to communicate with the routers it fails. I have already tried everything in my power without success. how to assign ip addresses in routing I have been ...
1 vote
0 answers
36 views

JunOS tagging aggregate route from more specific route - bgp communities

I have a certain use case with rtbh for the following: A /32 route (say 10.1.1.1/32) is injected into the network with a specific bgp community I'd like to match the aggregate prefix that /32 belongs ...
0 votes
0 answers
24 views

Need assistance with Cisco Firepower 5516X: Excluding a single IP from a specific Snort rule

I'm currently managing a Cisco Firepower 5516X device and have encountered a false positive for a specific Snort rule. Instead of disabling the rule for all traffic, I would like to selectively ...
0 votes
0 answers
53 views

CCNA OSPF Loopback as the router ID

FYI, I am studying for the CCNA and new to this. The scenerio, 2 routers R1 and R2. R1 Loopback IP as 192.168.0.1 R2 Loopback IP as 192.168.0.2 Using the loopback IP's as the router ID. I provisioned ...
1 vote
0 answers
51 views

Globally raise IP ARP inspection limit rate on Cisco

I am trying to raise the ip arp inspection limit rate from the default rate of 15 on my Cisco 9300 since I am getting to many %SW_DAI-4-PACKET_RATE_EXCEEDED: x packets received in xx milliseconds ...
0 votes
1 answer
394 views

Simultaneous dynamic and static NAT not working

Cisco 4200 series running IOS XE with a single public IP address and dynamic NAT, which works just fine. I am trying to add Static NAT to access a server (map external port XX to internal port YY. ...

1
2 3 4 5
76